Skip to content

Fine-grained PQC (v1.85) build macros: trim ML-DSA/ML-KEM by algorithm and operation#527

Open
aidangarske wants to merge 1 commit into
wolfSSL:masterfrom
aidangarske:pqc-granular-macros
Open

Fine-grained PQC (v1.85) build macros: trim ML-DSA/ML-KEM by algorithm and operation#527
aidangarske wants to merge 1 commit into
wolfSSL:masterfrom
aidangarske:pqc-granular-macros

Conversation

@aidangarske

@aidangarske aidangarske commented Jun 15, 2026

Copy link
Copy Markdown
Member

Description

Fine-grained build macros to trim the TPM 2.0 v1.85 PQC footprint (client lib +
fwTPM server) to the algorithms/operations actually used. Defaults on; opt out
with WOLFTPM_NO_* (or --enable-mldsa/--enable-mlkem configure flags).
Existing --enable-v185 builds are unchanged.

Build macros

  • WOLFTPM_V185 - full v1.85 (PQC + non-PQC spec code); implies WOLFTPM_PQC
  • WOLFTPM_PQC - lean ML-DSA/ML-KEM only (new meaning of --enable-pqc)
  • WOLFTPM_MLDSA - ML-DSA family
  • WOLFTPM_MLDSA_SIGN - ML-DSA sign commands
  • WOLFTPM_MLDSA_VERIFY - ML-DSA verify commands
  • WOLFTPM_HASH_MLDSA - pre-hash ML-DSA keys
  • WOLFTPM_MLKEM - ML-KEM family
  • WOLFTPM_MLKEM_ENCAP - ML-KEM encapsulate
  • WOLFTPM_MLKEM_DECAP - ML-KEM decapsulate
  • WOLFTPM_NO_* - opt-out for each of the above

Configure flags

  • --enable-pqc (lean) / --enable-v185 (full)
  • --enable-mldsa[=all|sign-only|verify-only|no]
  • --enable-mlkem[=all|enc|dec|no]
  • --disable-hash-mldsa (both algos no is a configure error; use --disable-pqc)

@aidangarske aidangarske marked this pull request as ready for review June 15, 2026 23:12
@aidangarske aidangarske requested a review from dgarske June 16, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants